Encedo PKI

Certificate authorities of Encedo Limited used to attest Encedo HEM devices.

Hierarchy

Encedo Root CA             RSA 4096, valid until 2040-12-31
└─ Encedo Attestation CA   ECDSA P-256, valid until 2030-08-21
   └─ Encedo Custody CA    ECDSA P-256, valid until 2030-08-21
      └─ HEM device certificates

CA certificates

CA	Download	SHA-256 fingerprint / Subject Key Identifier
Encedo Root CA	DER · PEM	`B2:8F:4E:E4:CF:26:02:82:60:CF:4F:0D:B1:8B:D2:FB:72:34:D1:72:92:57:97:DC:A7:F8:1E:53:A2:81:6E:9C` `SKI E7:F0:D1:36:5F:51:58:CC:82:9C:1E:51:68:3B:ED:2C:54:82:0F:D5`
Encedo Attestation CA	DER · PEM	`AA:12:2E:2F:04:DF:05:D5:52:09:3A:C0:9F:D1:69:FC:3E:13:D2:65:63:FE:5A:5E:26:6C:DC:1A:7B:BD:B6:F3` `SKI 9E:2F:18:A5:6A:7A:50:01:3D:53:45:28:26:61:3F:EA:21:84:41:A0`
Encedo Custody CA	DER · PEM	`1F:17:51:E7:57:C0:4E:D3:E8:A8:97:F8:79:3B:EF:6A:E4:1E:70:7C:5E:0D:55:45:DF:9E:CD:9C:1D:EC:5C:67` `SKI 79:55:57:8E:95:AD:27:B5:3B:06:C9:C2:CA:1C:02:36:A8:0E:7C:06`

intermediates-chain.pem – Custody CA + Attestation CA, in the order a client should send them.

Certificate revocation lists

Issuer	CRL	Next update
Encedo Root CA	root-ca.crl	Nov 4 21:15:51 2027 GMT
Encedo Attestation CA	attestation-ca.crl	Nov 4 21:15:56 2027 GMT
Encedo Custody CA	custody-ca.crl	Nov 4 21:15:59 2027 GMT

Verify

openssl verify -CAfile root-ca.pem -untrusted intermediates-chain.pem device.pem

SHA256SUMS